Re:Bitwarden SDK relicensed from proprietary to GPLv3
by ezst on Friday October 25, 2024 @01:14AM
(#41942418)
What finally brought me to using BW was that I simultaneously needed to backup/sync my TOTPs across mobile/desktop devices, and came to have the need for sharing an increasing number of passwords with my SO. It delivered beautifully on all of that.
[ Parent
| on HN ]
Re:Bitwarden SDK relicensed from proprietary to GPLv3
by CaptainNegative on Friday October 25, 2024 @01:29AM
(#41942473)
This isn't an area I know much about, but wouldn't there be a security risk involved with storing the TOTP seeds alongside the passwords? Or is that not a real concern?
Re:Bitwarden SDK relicensed from proprietary to GPLv3
by 3np on Friday October 25, 2024 @01:49AM
(#41942562)
It's a valid concern. Especially if you use the same BW for password and TOTP for the same service, you've effectively reduced 2 factors to 1. If you really must sync both your TOTP secrets and your passwords, those should be completely separate systems.
Re:Bitwarden SDK relicensed from proprietary to GPLv3
by ezst on Friday October 25, 2024 @10:40AM
(#41945722)
Totally correct, the lame excuse being that it didn't make the situation worse for the reason that those factors were anyway authenticated using the same device previously already. But at least I am now in much less trouble in case this device gets lost/broken/stolen/…